CVE-2017-13208-Scanner

CVE-2017-13208-Scanner https://nvd.nist.gov/vuln/detail/CVE-2017-13208 Introduction This is a simple script capable of detecting the CVE-2017-13208 vulnerability in Android libnetutils.so files. How it works Using r2pipe, the script checks whether dhcpsize's value is checked, if it isn't - the fi...

log4j-rce-test

Build ./build.sh Start log4j RCE Server ./start-log4j-rce-server.sh Test Run java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Check if you get logs in hack.log from current folder You can change this line String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + " ./hack.log" ; in file...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, with vulnerability ID CVE-2017-16995...

CVE-2024-1086-Exploit

🔒 CVE-2024-1086 Exploit Project 🛡️ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...

fix-react2shell-next

fix-react2shell-next 一条命令修复 Next.js / React RSC 应用中的 CVE-2025-66478 （React 2 Shell RCE）漏洞。 root@kitploit: npx fix-react2shell-next 按照官方公告进行确定性的版本升级。 功能简介 1. 递归扫描 所有 package.json 文件（支持 monorepo） 2. 检查 以下包是否存在易受攻击的版本： next react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack ...

t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 Description This vulnerability allows arbitrary command execution on systems running Apache Unomi version 1.5.1, by exploiting MVEL expression language injection. Project Page GitHub - Vulhub - Unomi CVE-2020-139...

CVE-2023-39115

CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...

ttyd

ttyd - 端末をウェブ上で共有 ttydは、端末をウェブ上で共有するためのシンプルなコマンドラインツールです。 特徴 高速化のために libuv と WebGL2 をベースに構築 CJK および IME 対応の本格的な端末 ZMODEM lrzsz / trzsz ファイル転送サポート Sixel 画像出力サポート img2sixel / lsix OpenSSL / Mbed TLS ベースの SSL サポート カスタムコマンドをオプション付きで実行可能 基本認証サポートと多数のカスタムオプション クロスプラットフォーム: macOS, Linux, FreeBSD/OpenBSD...

virustotalx

virustotalx for endpoints virustotalx for IPs V2 Installation root@kitploit: git clone https://github.com/orwagodfather/virustotalx.git root@kitploit: cd virustotalx create a 3 accounts https://www.virustotal.com/gui/join-us and copy the 3 api keys === root@kitploit: nano orwa.sh & root@kitploit:...

CVE-2021-43798

CVE-2021-43798 Grafana-Arbitrary-File-Read 8.0.0 8.3.0 A vulnerability in Grafana CVE-2021-43798 versions 8.0.0 8.3.0 that allows an unauthenticated attacker to read arbitrary files from the server by leveraging a path traversal aimed towards the /public/plugins/ path to access sensitive files on...

cracken

Cracken Crackenは、高速なパスワードワードリスト生成、Smartlist作成、パスワードハイブリッドマスク分析ツールであり、純粋で安全なRustで書かれています（詳細はtalk/を参照）。maskprocessor、hashcat、Crunch、そして🤗 HuggingFaceのtokenizersのような素晴らしいツールに触発されています。 何？なぜ？うぉっと？？ DeepSec2021で、NLPトークナイザーを利用してパスワード内の共通の部分文字列を活用するハイブリッドマスクとしてパスワードを分析する新しい方法を発表しました（詳細はtalk/を参照）。...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automation of the exploitation of CVE-2022-26923 Certifried allowing privilege escalation via abuse of Active Directory Certificate Services AD CS and Resource-Based Constrained Delegation RBCD, leading to the dump of the NTLM hash of a domain...

CVE-2023-45878

CVE-2023-45878 Wrote this script based on the work of https://herolab.usd.de/security-advisories/usd-2023-0025/ . The exploit works by using an Arbitrary File Write exploit in Gibbon LMS 25.0.1 . This PoC will use upload a simple php cmd script, and then use that to load a powershell revshell...

CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal challenge inspired by 0xtensho Made for cleaner output and only for reverse shell Usage: root@kitploit: Change the host and the listener variable first python3 CVE-2025-49132POC.py Disclaimer LEGAL DISCLAIMER: This Proof of Concept PoC is for...

SMB-Protocol-Vulnerability_CVE-2017-0144

LAB: ATTACKING THE WINDOWS OPERATING SYSTEM VIA THE SMB PROTOCOL VULNERABILITY. 1. DESCRIPTION 2. GENERAL INTRODUCTION 3. PREPARATION 4. PERFORMING THE ATTACK 5. HOW TO PREVENT 1. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install root@kitploit: GO111MODULE=on go install...

gospider

GoSpider GoSpider - Goで書かれた高速なWebスパイダー Gospiderをあなたの偵察ワークフローに簡単に統合できますか？ このプロジェクトはOsmedeus Engineの一部でした。統合方法はこちらで確認してください @OsmedeusEngine インストール GOインストール root@kitploit: GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker root@kitploit: Clone the repo git clone...

CVE-2021-44228

Log4Shell POC CVE-2021-44228 The scope of this repository is to provide all the components needed to exploit CVE-2021-44228, nicknamed Log4Shell, and to show how to exploit it. The ingredients needed to exploit this vulnerability are the following: 1. An LDAP Server that will redirect the...